Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Odhq0t1rOK-rBOggn-BGVOHyH1s.roa
File:                     Odhq0t1rOK-rBOggn-BGVOHyH1s.roa (raw, json)
Hash identifier:          LNEvDXNPYyKLGMkPR4mpqCnHzINWYKGWnK/ZwkGxUcg=
Subject key identifier:   39:D8:6A:D2:DD:6B:38:AF:AB:04:E8:20:9F:E0:46:54:E1:F2:1F:5B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0558
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Odhq0t1rOK-rBOggn-BGVOHyH1s.roa
Signing time:             Tue 31 Mar 2026 08:19:54 +0000
ROA not before:           Tue 31 Mar 2026 08:19:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        119.150.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=39D86AD2DD6B38AFAB04E8209FE04654E1F21F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:b8:05:00:29:0f:e0:f0:0c:ec:05:99:f9:
                    a6:94:d3:a4:c6:b1:8b:be:44:c3:fc:d3:73:17:a3:
                    ed:88:03:49:be:85:ae:54:83:96:7c:e2:b4:05:65:
                    c1:a7:ac:df:e8:88:16:1a:55:f6:a8:94:e6:ef:ae:
                    03:41:bb:2e:45:1d:66:45:75:8c:12:4d:57:1e:cf:
                    25:78:f9:43:a4:94:f8:60:4e:13:43:ca:45:89:f5:
                    93:9c:8a:90:e0:b5:c2:39:05:c3:09:ce:13:1a:4b:
                    50:12:96:f9:14:7a:9c:ad:77:72:88:60:31:3b:97:
                    3f:75:fc:35:a2:5f:f1:b6:7b:fa:26:f3:f5:60:6d:
                    82:5c:ae:b8:7d:ee:59:e1:39:8a:8a:55:75:72:d0:
                    e3:e2:4e:59:2a:55:ae:41:72:02:94:5c:42:69:83:
                    c7:42:bd:86:70:93:32:8e:bc:5f:30:34:0b:de:83:
                    d4:21:fa:b5:78:d7:19:dc:9b:96:73:b1:3a:d7:a3:
                    8e:b7:a0:18:1b:4d:fd:d6:ed:f1:fb:c0:61:f4:43:
                    a8:26:04:4d:e0:0c:8d:ce:fe:4e:c0:d9:be:d5:cc:
                    66:37:24:ca:df:2f:90:56:f1:0e:a4:8b:83:1e:82:
                    34:4c:4a:ab:59:7a:14:ff:c9:8e:d2:b5:f4:eb:ec:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D8:6A:D2:DD:6B:38:AF:AB:04:E8:20:9F:E0:46:54:E1:F2:1F:5B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Odhq0t1rOK-rBOggn-BGVOHyH1s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:7c:f2:fb:5d:75:32:ac:3a:e5:d2:17:5d:1c:fe:e4:ab:
         a2:65:21:32:ab:85:e8:57:ea:41:a0:9e:26:66:2e:1c:f2:e3:
         59:fb:81:03:c2:7a:e3:2c:e6:74:67:2a:65:b6:31:1e:ef:89:
         22:49:a4:f0:a3:00:3f:a9:49:ed:e2:df:30:5a:d0:a3:bb:d2:
         72:3d:ae:52:9a:67:60:21:8d:a9:52:73:f1:db:2c:d2:18:31:
         01:d5:71:d9:ad:73:63:d0:f4:00:e0:ee:c2:b4:e5:b8:75:41:
         14:f2:5a:d5:36:18:f6:a5:79:82:f7:09:a3:ee:56:bb:11:a1:
         d6:d9:b8:09:75:72:c0:0a:bd:97:86:61:64:8c:51:55:90:f8:
         39:37:fb:9e:a4:cb:c4:eb:1f:ec:23:f5:fe:a5:cf:0d:a7:bb:
         33:0d:4f:75:e8:1c:a5:78:43:69:35:52:dc:cc:87:02:f4:87:
         7c:11:cc:79:92:3a:e8:d2:ed:f2:df:6d:bd:2b:57:e8:e8:be:
         d6:a6:c2:82:6e:68:c7:cd:ad:47:9a:d8:ab:80:54:4b:b8:15:
         b2:a9:51:a8:ea:ae:67:0d:cb:d3:86:66:db:76:9f:ac:dd:08:
         48:8b:e6:43:ec:06:28:6e:08:2e:75:15:9c:8a:4e:15:0e:43:
         ef:29:4b:9a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE5NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5RDg2QUQyREQ2QjM4
QUZBQjA0RTgyMDlGRTA0NjU0RTFGMjFGNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7QrgFACkP4PAM7AWZ+aaU06TGsYu+RMP803MXo+2IA0m+ha5U
g5Z84rQFZcGnrN/oiBYaVfaolObvrgNBuy5FHWZFdYwSTVcezyV4+UOklPhgThND
ykWJ9ZOcipDgtcI5BcMJzhMaS1ASlvkUepytd3KIYDE7lz91/DWiX/G2e/om8/Vg
bYJcrrh97lnhOYqKVXVy0OPiTlkqVa5BcgKUXEJpg8dCvYZwkzKOvF8wNAveg9Qh
+rV41xncm5ZzsTrXo463oBgbTf3W7fH7wGH0Q6gmBE3gDI3O/k7A2b7VzGY3JMrf
L5BW8Q6ki4MegjRMSqtZehT/yY7StfTr7Ny/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUOdhq0t1rOK+rBOggn+BGVOHyH1swHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L09kaHEwdDFyT0stckJPZ2duLUJHVk9IeUgxcy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ3loAwDQYJKoZIhvcNAQELBQADggEB
AFa6fPL7XXUyrDrl0hddHP7kq6JlITKrhehX6kGgniZmLhzy41n7gQPCeuMs5nRn
KmW2MR7viSJJpPCjAD+pSe3i3zBa0KO70nI9rlKaZ2AhjalSc/HbLNIYMQHVcdmt
c2PQ9ADg7sK05bh1QRTyWtU2GPaleYL3CaPuVrsRodbZuAl1csAKvZeGYWSMUVWQ
+Dk3+56ky8TrH+wj9f6lzw2nuzMNT3XoHKV4Q2k1UtzMhwL0h3wRzHmSOujS7fLf
bb0rV+jovtamwoJuaMfNrUea2KuAVEu4FbKpUajqrmcNy9OGZtt2n6zdCEiL5kPs
BihuCC51FZyKThUOQ+8pS5o=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:22 2026 by rpki-client